Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VoMmQsaB3oyDLAcTkD56qn0G_zs.roa
File: VoMmQsaB3oyDLAcTkD56qn0G_zs.roa (raw, json)
Hash identifier: +7mvdfh2e3tHLUqp+nYWEVpAbfB9myi0saY/gw2kJWA=
Subject key identifier: 56:83:26:42:C6:81:DE:8C:83:2C:07:13:90:3E:7A:AA:7D:06:FF:3B
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C8B64AEFEA67E70BEEC91DCB93FE
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VoMmQsaB3oyDLAcTkD56qn0G_zs.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201138
IP address blocks: 185.125.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c8:b6:4a:ef:ea:67:e7:0b:ee:c9:1d:cb:93:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56832642c681de8c832c0713903e7aaa7d06ff3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:f9:4e:84:d9:f6:74:b3:62:ad:8b:b4:99:
14:9a:e6:3b:f3:c0:8c:aa:bc:6b:e2:fc:1b:59:40:
ef:15:64:3f:11:13:d5:f7:28:8b:63:1b:78:7f:59:
ea:e7:61:77:7f:14:61:f8:4a:9c:58:f5:11:71:bc:
96:fa:20:cb:a1:90:7f:d1:99:d1:9f:eb:47:92:13:
56:29:9d:fd:7c:d8:3c:f2:cb:5e:d7:ba:34:86:de:
4a:e4:1e:ff:8c:70:bc:c8:60:79:4d:75:58:48:6c:
c0:4f:50:ec:18:e0:cf:9e:72:20:37:a8:a1:9d:15:
df:df:87:f2:b3:6c:fb:a6:77:19:7a:b4:21:24:68:
78:a9:0d:34:3b:1d:48:b4:a6:47:df:fc:95:f5:cb:
72:f1:f8:0a:ab:d2:ef:6c:9d:bc:a9:ff:b3:bb:5f:
08:11:c6:7a:b4:cd:2c:c4:be:bc:e0:49:7a:e7:04:
a4:0d:fb:ac:ca:38:03:21:a3:88:6c:21:25:02:a7:
d4:8a:92:07:d7:da:04:3f:74:6e:c0:a5:d9:69:b3:
34:45:09:d1:13:ed:f5:12:23:91:6e:ed:11:8c:34:
84:02:43:57:7a:e1:a0:e0:ae:25:4a:1c:51:d1:21:
34:47:d3:d9:d8:7b:41:19:12:52:2f:a2:b3:3d:ef:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:26:42:C6:81:DE:8C:83:2C:07:13:90:3E:7A:AA:7D:06:FF:3B
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VoMmQsaB3oyDLAcTkD56qn0G_zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cf:89:7f:0f:78:5e:0b:74:ce:0c:6d:c7:d6:09:2e:d5:47:
19:e8:c9:25:8f:e0:82:c4:1d:bb:5c:46:68:86:a7:29:ca:53:
c1:03:4a:51:4b:6b:0b:b9:fd:47:b0:2f:40:9a:0f:af:a4:80:
5b:27:dc:a6:b8:ea:eb:45:4a:9d:84:ce:8c:b0:f2:11:28:de:
ce:59:7c:92:8c:d8:d7:04:76:b1:ef:d3:7a:0e:0d:75:71:67:
1b:3c:4b:9a:d1:c6:87:b1:af:a1:14:9b:06:fe:15:77:45:4d:
e0:ed:1c:17:ae:d4:39:99:cb:2a:b7:9f:36:6b:d1:52:70:ed:
ea:ac:ae:47:bf:5e:fe:c8:71:24:87:98:46:a9:98:ab:2a:6a:
fd:15:d0:f3:9d:17:33:10:1c:bf:5d:af:68:8b:78:68:3e:63:
21:2c:3a:46:14:a6:52:bc:9a:c8:86:6b:a7:4a:ea:15:5b:93:
cd:13:dc:6e:4f:48:f0:5c:ca:e2:8b:b9:8f:fd:72:78:a2:db:
7a:90:51:2d:d3:ab:02:8b:4a:8a:9f:30:25:eb:67:1f:71:e7:
ac:c9:14:be:8c:7a:3f:16:35:ac:25:82:db:86:64:96:18:d0:
fd:c9:41:16:49:7f:8d:95:8a:23:c4:9a:42:d7:30:d3:e8:04:
5d:cf:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client